Re: Dovecot and Pigeonhole v2.4.3 released (unexpected Lua dependency)

Fixed in main with https://github.com/dovecot/core/compare/dfe1a7293879dbce25b3b471bdb8ef17ec2a...

Aki

On 28/03/2026 11:45 EET Aki Tuomi via dovecot <dovecot@dovecot.org> wrote:

On 28/03/2026 11:03 EET Washington Odhiambo via dovecot <[1]dovecot@dovecot.org> wrote:

 On Fri, Mar 27, 2026 at 11:26AM Aki Tuomi via dovecot
 <[2]dovecot@dovecot.org>
 wrote:


   Hi!

   We are happy to publish version 2.4.3 of Dovecot and Pigeonhole. These
   contain several CVEs, discovered by external researches. The majority
   of
   these have been discovered with help of automated code analysis tools
   like
   claude code security, which is why some of these are rather old,
   missed
   bugs.

   No new supported distros have been added or old removed, no new
   dependencies have been added.

   Note that there are experimental features in 2.4, one is enabled with
   `--enable-experimental-mail-utf8`, and another with
   `--enable-experimental-imap4rev2`, and you also need to set
   mail_utf8_extensions=yes and imap4rev2_enabled=yes to enable them in
   config.

   [3]https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
   [4]https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz.sig
   [5]https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz

   [6]https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz.sig

   Binary packages in [7]https://repo.dovecot.org/
   Docker images in [8]https://hub.docker.com/r/dovecot/dovecot



 Using the same configure options I used for dovecot-2.4.2, I end up with
 a
 compile failure for 2.4.3:

 ./configure --enable-maintainer-mode \
 --with-sql=yes \
 --with-mysql \
 --with-pgsql \
 --with-zlib \
 --with-bzlib \
 --with-ssl=openssl \
 --enable-experimental-mail-utf8 \
 --enable-experimental-imap4rev2 \
 --with-pcre2
 make

Hi,

unfortunately lua dependency crept in. Fix is already in review. I'll post the link once it's merged.

Aki

References

Visible links

1. mailto:dovecot@dovecot.org
2. mailto:dovecot@dovecot.org
3. https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz
4. https://dovecot.org/releases/2.4/dovecot-2.4.3.tar.gz.sig
5. https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz
6. https://pigeonhole.dovecot.org/releases/2.4/dovecot-pigeonhole-2.4.3.tar.gz....
7. https://repo.dovecot.org/
8. https://hub.docker.com/r/dovecot/dovecot

---

dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-leave@dovecot.org